$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd560e7b-e988-4a85-8de6-72347e53a7b1.roa File: cd560e7b-e988-4a85-8de6-72347e53a7b1.roa (raw, json) Hash identifier: LwmqjFF9HRYXpgKFVvjy/dTcNOPA4o/JgDFHbyPkoyU= Subject key identifier: EA:3C:44:34:D0:F0:A0:B2:A9:F5:91:AE:11:EF:E8:C7:9F:B8:48:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5E671FEB826DD783EF4B2647FB8C21031E0CD1CF Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd560e7b-e988-4a85-8de6-72347e53a7b1.roa Signing time: Thu 29 Oct 2026 00:30:17 +0000 ROA not before: Thu 29 Oct 2026 00:30:17 +0000 ROA not after: Wed 27 Jan 2027 23:59:59 +0000 asID: 214101 IP address blocks: 130.176.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:67:1f:eb:82:6d:d7:83:ef:4b:26:47:fb:8c:21:03:1e:0c:d1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 29 00:30:17 2026 GMT Not After : Jan 27 23:59:59 2027 GMT Subject: serialNumber=648e24017007eb0260a3d6feb9a1f8796f85d7acd34958ce3946581d7704c846, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:f7:76:25:b7:4b:48:df:59:17:50:f7:06: 0f:fe:63:b0:0d:ea:41:ae:a9:9c:11:00:a4:0e:38: 5f:75:ad:13:79:5e:0b:90:cb:97:24:d9:8a:d0:17: 5b:4d:6d:c0:78:fd:56:55:8b:92:16:53:71:cf:1c: 94:84:ec:3e:16:04:fb:61:0f:e2:5c:a4:e9:0e:e6: af:60:cc:4b:bd:8a:35:14:67:8e:17:60:87:5c:d6: fc:bf:d5:8c:2a:7b:06:2b:a5:04:8b:bd:ff:fb:5e: 95:82:ec:6a:7e:91:49:c6:92:17:e9:77:da:4d:90: 94:45:68:77:d3:d3:d6:04:6c:12:af:75:5f:0f:66: 13:1f:49:76:c5:78:59:64:30:08:ee:09:c1:64:1b: 82:a5:4a:b9:92:1f:5a:d1:b4:17:fc:24:07:39:16: 82:dc:43:ec:75:0e:ed:74:ab:b5:38:e2:b5:2c:06: 66:6c:e8:e0:92:09:4c:d1:20:73:22:91:92:9e:9b: 4b:ca:bb:70:34:60:0d:7b:67:cc:57:8e:73:ba:2a: 57:e5:15:35:73:e0:37:63:08:88:e6:a6:0a:92:1a: 79:e0:bc:b4:3e:a0:91:b5:ef:4f:ec:ff:c4:b9:74: 3e:d3:e7:13:2f:42:b0:4b:4a:4e:a7:cb:e3:02:07: 81:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3C:44:34:D0:F0:A0:B2:A9:F5:91:AE:11:EF:E8:C7:9F:B8:48:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cd560e7b-e988-4a85-8de6-72347e53a7b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.176.47.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:88:c4:b0:6d:8e:a0:27:9d:c8:e9:74:b3:da:56:9f:52:7e: 3c:11:69:90:86:e7:5f:93:4a:41:9d:91:bd:06:46:18:66:97: 78:56:83:5d:98:ae:d1:df:03:8a:ef:9d:ea:f5:67:79:4a:24: c1:29:fb:f1:ca:c8:d7:bd:64:21:91:97:c6:14:ce:90:0a:8c: 98:1c:7e:48:aa:55:d8:87:5d:14:55:42:ae:4c:6a:30:2a:f3: 3b:f9:cf:f6:1c:18:2e:19:68:e4:b7:14:f5:d9:20:bb:53:33: 26:60:6c:6d:2b:0e:94:9f:f4:fa:90:e9:b1:bc:70:6d:da:0a: c4:a6:71:63:d0:4d:b3:c7:ab:cc:96:a3:9e:46:e7:00:aa:eb: a1:33:1a:ce:52:c7:c4:31:b1:21:0b:1c:01:d7:a1:ad:d0:5c: 8c:ae:ea:71:42:f3:b4:b7:a6:c4:e0:f3:fa:b7:c2:19:7f:f3: 7f:4e:a2:e5:e5:0c:6c:f5:97:9b:44:c9:93:b5:4c:27:3b:2e: 1b:61:91:a9:fd:5d:ab:c0:eb:2e:1f:45:57:02:d1:a0:cf:20: 56:58:04:fb:f9:59:9a:ea:79:43:53:62:8a:2a:ae:f6:22:bf: 56:2f:ee:86:9a:01:89:11:de:fd:27:64:b8:bf:c7:e1:36:3c: 18:37:4d:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXmcf64Jt14PvSyZH+4whAx4M0c8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDAzMDE3WhcNMjcwMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDhlMjQwMTcwMDdlYjAyNjBhM2Q2ZmViOWExZjg3OTZm ODVkN2FjZDM0OTU4Y2UzOTQ2NTgxZDc3MDRjODQ2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2gfd2JbdLSN9ZF1D3Bg/+Y7AN6kGuqZwRAKQOOF91rRN5 XguQy5ck2YrQF1tNbcB4/VZVi5IWU3HPHJSE7D4WBPthD+JcpOkO5q9gzEu9ijUU Z44XYIdc1vy/1YwqewYrpQSLvf/7XpWC7Gp+kUnGkhfpd9pNkJRFaHfT09YEbBKv dV8PZhMfSXbFeFlkMAjuCcFkG4KlSrmSH1rRtBf8JAc5FoLcQ+x1Du10q7U44rUs BmZs6OCSCUzRIHMikZKem0vKu3A0YA17Z8xXjnO6KlflFTVz4DdjCIjmpgqSGnng vLQ+oJG170/s/8S5dD7T5xMvQrBLSk6ny+MCB4EtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6jxENNDwoLKp9ZGuEe/ox5+4SLwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NkNTYwZTdiLWU5ODgtNGE4NS04ZGU2LTcyMzQ3ZTUzYTdiMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACCsC8wDQYJKoZIhvcNAQELBQADggEBAD2IxLBtjqAnncjpdLPaVp9SfjwR aZCG51+TSkGdkb0GRhhml3hWg12YrtHfA4rvner1Z3lKJMEp+/HKyNe9ZCGRl8YU zpAKjJgcfkiqVdiHXRRVQq5MajAq8zv5z/YcGC4ZaOS3FPXZILtTMyZgbG0rDpSf 9PqQ6bG8cG3aCsSmcWPQTbPHq8yWo55G5wCq66EzGs5Sx8QxsSELHAHXoa3QXIyu 6nFC87S3psTg8/q3whl/839OouXlDGz1l5tEyZO1TCc7Lhthkan9XavA6y4fRVcC 0aDPIFZYBPv5WZrqeUNTYooqrvYiv1Yv7oaaAYkR3v0nZLi/x+E2PBg3TRo= -----END CERTIFICATE-----Generated at Tue Nov 10 15:16:52 2026 by rpki-client